$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/66904805-86a2-3ece-9613-ec1a4856e79b.roa File: 66904805-86a2-3ece-9613-ec1a4856e79b.roa (raw, json) Hash identifier: UcN5DHtaWg/BK64U7oKEAChNT6E8aaH/KQnbD7zKdWA= Subject key identifier: F9:37:F1:46:52:97:36:81:38:F0:08:4C:AC:5D:83:56:D0:43:39:79 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4235E827E13D6B10FAE1540 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/66904805-86a2-3ece-9613-ec1a4856e79b.roa Signing time: Wed 19 Aug 2026 18:04:05 +0000 ROA not before: Wed 19 Aug 2026 18:04:05 +0000 ROA not after: Wed 03 Apr 2030 04:00:00 +0000 asID: 8075 IP address blocks: 150.171.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:5e:82:7e:13:d6:b1:0f:ae:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:04:05 2026 GMT Not After : Apr 3 04:00:00 2030 GMT Subject: CN=79aa4980-7fb5-4165-941d-3befacc39d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6a:36:b2:bf:5e:a3:e2:09:6e:07:63:ac:a4: f7:ad:bb:10:e5:c8:ab:b6:b5:a7:2e:26:85:e7:75: a3:8a:f2:f7:28:63:98:ff:a0:c6:8c:38:1f:bb:3d: 4e:65:32:e8:8e:92:15:22:c1:f2:27:40:5a:2c:29: 5e:93:45:26:cb:96:5b:be:18:be:59:3b:2a:ac:d8: 9c:37:9b:2e:e5:9b:68:a8:1e:82:6b:1f:c4:42:68: 68:24:6f:42:63:a8:28:bf:e8:6c:45:0a:4e:09:55: 48:91:9e:f0:80:96:a9:65:85:40:4c:70:5c:20:d6: b4:70:ee:b9:59:32:9c:79:09:21:65:60:0c:92:6a: d0:37:22:4c:9b:ad:53:77:29:af:88:5a:56:95:9f: 55:43:ba:83:9c:0d:98:81:0a:f1:e4:6d:b1:2c:c0: 76:f2:5c:d0:0c:e2:d3:b3:c2:76:9f:92:54:a4:c9: 08:55:7c:80:75:c3:66:da:de:01:cb:6a:0f:be:ce: 45:8e:ed:87:5e:50:b5:25:58:53:6e:82:b0:f4:b0: e1:f6:15:fc:2b:dd:0e:6d:ba:61:f1:f3:6c:d3:e1: be:32:29:5f:27:7c:9e:9c:ae:a1:42:19:00:f7:e7: 02:f7:03:ce:20:b9:d3:fd:91:7e:08:f2:2b:e2:d1: cd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:37:F1:46:52:97:36:81:38:F0:08:4C:AC:5D:83:56:D0:43:39:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/66904805-86a2-3ece-9613-ec1a4856e79b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 150.171.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:b9:ab:79:8d:a1:0a:40:73:2e:91:1e:9e:86:3e:cb:b8:5f: c7:0f:39:d7:46:de:92:de:fc:64:f5:9e:37:bb:47:ed:3e:01: 64:2e:51:ff:b4:65:16:eb:94:2b:8e:b3:a3:82:05:dc:b1:82: 52:de:a5:10:8b:f7:8a:75:2b:7c:90:5b:29:47:0a:7a:12:34: 1c:1d:a9:a2:0b:59:bf:d0:bb:ed:72:fb:bf:70:75:fa:9b:80: 48:db:34:28:1b:de:8a:90:01:af:b3:a8:0c:d2:96:3e:e9:ff: aa:a7:08:81:62:eb:1e:be:f5:80:d9:d9:f4:da:39:81:37:63: 4f:d8:53:8a:b9:01:22:59:b6:b4:e0:18:f1:5e:1c:15:08:5d: 18:39:13:68:83:fc:71:8e:b2:c6:22:5f:33:cd:78:56:e5:62: e6:44:57:9a:9b:07:1a:97:35:1a:98:b1:30:97:d1:b6:56:8c: ba:1c:e2:22:74:1e:53:14:50:71:77:3b:6c:2d:b6:dc:4c:13: 57:01:4e:23:42:09:df:43:8d:ff:81:7b:77:95:cd:f4:cb:7a: fa:56:4e:ad:80:ea:be:33:ff:85:49:b7:69:7f:ee:19:a9:18: 35:fa:19:4d:fb:ca:ab:34:42:74:0e:cc:63:a1:cc:64:a1:95: 71:86:52:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI16CfhPWsQ+uFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDQwNVoXDTMwMDQwMzA0MDAwMFowLzEtMCsGA1UEAxMk NzlhYTQ5ODAtN2ZiNS00MTY1LTk0MWQtM2JlZmFjYzM5ZDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2o2sr9eo+IJbgdjrKT3rbsQ5cirtrWnLiaF 53WjivL3KGOY/6DGjDgfuz1OZTLojpIVIsHyJ0BaLClek0Umy5Zbvhi+WTsqrNic N5su5ZtoqB6Cax/EQmhoJG9CY6gov+hsRQpOCVVIkZ7wgJapZYVATHBcINa0cO65 WTKceQkhZWAMkmrQNyJMm61TdymviFpWlZ9VQ7qDnA2YgQrx5G2xLMB28lzQDOLT s8J2n5JUpMkIVXyAdcNm2t4By2oPvs5Fju2HXlC1JVhTboKw9LDh9hX8K90Obbph 8fNs0+G+MilfJ3yenK6hQhkA9+cC9wPOILnT/ZF+CPIr4tHNlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPk38UZSlzaBOPAITKxdg1bQQzl5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNjY5MDQ4MDUtODZhMi0z ZWNlLTk2MTMtZWMxYTQ4NTZlNzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlqv+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+5q3mNoQpAcy6RHp6GPsu4X8cPOddG3pLe/GT1nje7R+0+AWQuUf+0 ZRbrlCuOs6OCBdyxglLepRCL94p1K3yQWylHCnoSNBwdqaILWb/Qu+1y+79wdfqb gEjbNCgb3oqQAa+zqAzSlj7p/6qnCIFi6x6+9YDZ2fTaOYE3Y0/YU4q5ASJZtrTg GPFeHBUIXRg5E2iD/HGOssYiXzPNeFblYuZEV5qbBxqXNRqYsTCX0bZWjLoc4iJ0 HlMUUHF3O2wtttxME1cBTiNCCd9Djf+Be3eVzfTLevpWTq2A6r4z/4VJt2l/7hmp GDX6GU37yqs0QnQOzGOhzGShlXGGUqE= -----END CERTIFICATE-----Generated at Fri Sep 4 23:00:19 2026 by rpki-client